Privacy & Data Protection

Privacy Policy

We believe privacy is a right, not an afterthought. This policy explains exactly what data CodeWithBuntu collects through our website and services, why we collect it, how we protect it, and the choices you have.

Effective: March 29, 2026Last updated: March 29, 2026~12 min read

1. Introduction & Scope

This Privacy Policy ("Policy") describes how CodeWithBuntu ("we", "us", "our"), a software development studio operated by Arun Singh and based in Jammu & Kashmir, India, collects, uses, stores, and protects personal information obtained through our website at codewithbuntu.com and any associated services, including our client intake process, newsletter, blog, and the Leadzy product showcase.

This Policy applies to all visitors, prospective clients, newsletter subscribers, and anyone who interacts with our website or submits a project enquiry. It does not apply to third-party websites we may link to.

By using our website, submitting a contact form, or subscribing to our newsletter, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

2. Data Controller

For the purposes of applicable data protection legislation (including the GDPR and India's Digital Personal Data Protection Act 2023), the data controller is:

Business

CodeWithBuntu

Address

Nowshera, Rajouri, Jammu & Kashmir, India – 185151

If you are located in the European Economic Area (EEA) and have concerns about our data processing, you also have the right to lodge a complaint with your local supervisory authority.

3. Information We Collect

We only collect information that is reasonably necessary to provide our services and improve your experience. Below is a precise breakdown of what we collect and where.

3.1 Project Enquiry / Contact Form

When you submit a project brief through the Project Planner on our Contact page, we collect:

Full NameTo address you correctly in communications
Email AddressPrimary channel for project updates and proposals
Phone NumberOptional — for direct consultation calls
Country & LocationTo understand timezone and regional requirements
Project TypeWeb App, Mobile App, API, UI/UX — to assign the right skill set
Project TitleShort descriptor of what you want to build
Project DescriptionDetailed requirements you provide
Budget Range (INR)To scope proposals appropriately
Expected TimelineDesired delivery window in days

We also auto-generate a Client ID (format: CWB-C-{timestamp}) and a Project ID (format: CWB-P-{timestamp}-{random}) for internal tracking. The source is recorded as "Website".

3.2 Newsletter Subscription

When you subscribe via the footer newsletter form, we collect your email addressand record the subscription timestamp. This data is stored in our Firestoresubscribers collection. You may unsubscribe at any time via the link in any email we send.

3.3 Feedback & Testimonials

If you submit a testimonial through our Feedback page, the content you provide (including your name and review text) is stored in our feedbacks collection and may be displayed publicly on our website as part of our "Wall of Love." Submission is voluntary.

3.4 Automatic Visitor Data

When you browse our website, our server automatically receives and logs:

  • IP address (used to derive approximate geographic location)
  • Browser type and version (e.g., Chrome 124 on macOS)
  • Operating system and device type
  • Referring URL (the page you came from)
  • Pages visited and time spent on each page
  • Date and time of visit
  • Screen resolution and language preference

We use session-based deduplication via sessionStorage to avoid logging the same visit multiple times. Admin routes, API routes, and static assets are excluded from visit tracking.

4. How We Use Your Data

We use personal data only for the purposes for which it was collected or for compatible purposes. Specifically:

Project Delivery

To scope, quote, and deliver the software project you enquired about, including correspondence, proposals, SOW preparation, and milestone updates.

Client Communication

To send project status updates, invoices, and responses to your enquiries via email. We do not cold-call or spam.

Service Improvement

Aggregated, anonymised visitor analytics help us understand which pages are most useful and improve site performance.

Security & Fraud Prevention

IP logging and session tracking help us detect abuse, block bot submissions, and protect the integrity of our forms and admin panel.

Newsletter & Tutorials

Subscribed email addresses are used to notify you of new tutorials, YouTube uploads, and service updates. Each email includes an unsubscribe link.

Legal Compliance

We may process data to comply with applicable Indian law, respond to court orders, or enforce our Terms of Service.

6. Cookies & Local Storage

We use a minimal set of browser-side storage mechanisms. We do not use advertising cookies or cross-site tracking cookies of any kind.

Name / KeyStorage TypePurposeDuration
cookie_consentlocalStorageStores your cookie preference (essential/all accepted) so the banner is not shown on every visitPersistent (until cleared)
visit_trackedsessionStoragePrevents duplicate page-view logs within a single browser sessionSession (cleared on tab close)
Firebase sessionCookie (HttpOnly)Maintains admin authentication state for the /admin dashboard. Not set for regular visitors.Session or 1 hour

6.1 Managing Cookies

Our cookie consent banner gives you the choice between Essential Only(strictly necessary for security and functionality) and Accept All(includes visitor analytics). You can change your preference at any time by clearing your browser's localStorage or using your browser's built-in privacy controls.

Most browsers allow you to refuse cookies or delete existing ones. Doing so will not prevent you from using our website, though some minor features (e.g., remembering your consent choice) may not work correctly.

7. Third-Party Services

We integrate the following third-party services, each governed by their own privacy policies. We encourage you to review these policies where relevant to you.

Google FirebasePrivacy Policy

Database, authentication, file storage, and serverless functions.

YouTube (Google LLC)Privacy Policy

Embedded tutorial videos and channel content on our Blogs page via the YouTube Data API.

Google MapsPrivacy Policy

Displays our office location on the Contact page.

Nodemailer / EmailJSPrivacy Policy

Routes transactional emails (project enquiry confirmations, admin notifications) via Gmail SMTP.

SweetAlert2Privacy Policy

Client-side notification library for success and error modals. No data is transmitted externally.

React Phone Input 2Privacy Policy

Renders the phone country-code selector in our contact form. Runs entirely client-side; no data is shared.

We are not responsible for the privacy practices of any third-party service. We select partners who meet high data protection standards and have Data Processing Agreements where required.

8. YouTube & Embedded Media

Our Blogs page fetches and displays content from our YouTube channel (@codewithbuntu) using the YouTube Data API v3. When you:

  • Browse the Blogs pageOur server calls the YouTube API to fetch video metadata (title, thumbnail, view count, duration). No personal data about you is sent to YouTube at this stage.
  • Play a videoAn embedded YouTube player loads, which may set YouTube/Google cookies and collect data according to Google's Privacy Policy — including your IP address, device info, and watch behaviour.
  • Subscribe or like via YouTubeAny interaction with YouTube's embedded player or links is governed solely by YouTube/Google's terms.
If you are concerned about YouTube tracking, you can watch our tutorials directly on youtube.com/@codewithbuntu while logged out, or use a browser extension that blocks cross-site trackers.

9. Data Retention

We retain personal data only as long as necessary for the purpose it was collected, or as required by law. Our default retention periods are:

Data CategoryRetention PeriodRationale
Project enquiry (non-client)12 monthsAfter which we consider the lead inactive
Active client records5 years post-projectFor warranty, legal, and tax compliance
Newsletter subscribersUntil unsubscribeRemoved promptly on request
Feedback/testimonialsUntil deletion requestedMay be displayed publicly while active
Visitor analytics logs90 daysSufficient for traffic pattern analysis
Admin authentication logs30 daysSecurity audit trail
Financial records (invoices)7 yearsIndian Income Tax Act requirements

10. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Service ProvidersGoogle Maps, email providers, and other services (listed in Section 7) receive data strictly to deliver the services described. All operate under their own privacy policies and applicable data processing agreements.
Legal RequirementsWe may disclose your data if required to do so by law, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business TransfersIn the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you via email and provide a 30-day opt-out window before your data is subject to a different privacy policy.
Aggregated AnalyticsWe may share anonymised, aggregated statistics (e.g., "our most visited page is Projects") publicly or with partners. This data cannot identify you.

11. Your Privacy Rights

Depending on your location, you may have the following rights. We honour all valid requests within 30 days at no charge.

Right to AccessRequest a copy of all personal data we hold about you.
Right to RectificationRequest correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten")Request deletion of your data where no legal retention obligation applies.
Right to Restrict ProcessingAsk us to halt processing while a dispute is resolved.
Right to Data PortabilityReceive your data in a structured, machine-readable format (JSON/CSV).
Right to ObjectObject to processing based on legitimate interests, including direct marketing.
Right to Withdraw ConsentWithdraw consent for newsletters or cookies at any time without affecting prior processing.
Right to ComplainLodge a complaint with your national data protection authority if unsatisfied with our response.
To exercise any of these rights, email us at codewithbuntu@gmail.com with the subject line "Privacy Request – [Your Name]". We may ask you to verify your identity before fulfilling the request.

12. Children's Privacy

Our website and services are intended for adults and businesses. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately at codewithbuntu@gmail.com and we will delete it promptly upon verification.

13. International Data Transfers

CodeWithBuntu is based in India. If you are accessing our website from the EEA, UK, USA, or another jurisdiction with data protection laws, please be aware that your data may be transferred to and processed in India, and in the USA (via Google Firebase servers).

Google Firebase's cross-border transfers are covered by the EU Standard Contractual Clauses (SCCs) and Google's Cloud Data Processing Addendum. For transfers from India, we comply with the Digital Personal Data Protection Act 2023 (DPDPA). We take appropriate safeguards to ensure your data is protected to a standard at least equivalent to that required under your local law.

14. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Send an email notification to active clients and newsletter subscribers at least 14 days before changes take effect
  • Display a prominent notice on our website homepage for 14 days following the update

Your continued use of our website after the effective date of the revised Policy constitutes your acceptance. If you do not agree with the changes, you should discontinue use and may request deletion of your data.

Contact & Data Requests

15. Contact Us

For privacy enquiries, data access/deletion requests, or concerns about how we handle your data, please reach out. We aim to respond within 2 business days and resolve all requests within 30 days.

Email

codewithbuntu@gmail.com

Subject: Privacy Request – [Name]

Address

Nowshera, Rajouri, Jammu & Kashmir, India – 185151

Response Time

Mon–Fri, 9 AM – 6 PM IST

Requests fulfilled within 30 days

Last updated: March 29, 2026

© 2026 CodeWithBuntu. All rights reserved.